Unscored CVE-2012-5298 EUVD-2012-5221GHSA-cpf8-vcfr-v945

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remo…

Published Oct 4, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request.

References

20120103 mavili guestbook - SQL Injection and XSS Vulnerabilities mailing-list
51252 vdb-entry
mavili-guestbook-information-disclosure(72101) vdb-entry
http://code.google.com/p/maviliguestbook/issues/detail?id=1